If they want to play, who cares? As long as they can't update their changes to the MySQL table, how does their play hurt anything? If there is data that they should not be permitted to access, they shouldn't have the ability to see it in the first place.
I can't see the problem here.
-PatP